September 27-30, 2021
Seattle, Washington, USA + Virtual
View More Details & Registration

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for Open Source Summit + Embedded Linux Conference + OSPOCon 2021 to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

This schedule is automatically displayed in Pacific Daylight Time (UTC -7). To see the schedule in your preferred timezone, please select from the drop-down menu to the right, above "Filter by Date." The schedule is subject to change.

IMPORTANT NOTE: Timing of sessions and room locations are subject to change.

Back To Schedule
Tuesday, September 28 • 11:00am - 11:50am
(VIRTUAL) Security and Flexibility: Decouple Policy to Enable Architectural Choice - Ash Narkar, Styra

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Feedback form is now closed.
Perhaps for the first time, adding flexibility doesn’t have to come at the expense of increasing risk. Decoupled policy-as-code means that authorization rules, access governance, and policy guardrails can provide control, without mandating or locking in underlying systems.
Decoupling decisions from downstream projects and tools enables better control and visibility over who, and what, can do what - and allow distributed policy enforcement across a range of languages, execution environments, and protocols. In this session we’ll show how CNCF graduated project Open Policy Agent provides decoupled policy across:
  • Kubernetes: How to ensure deployment of the application is properly bound to the policies that are intended to secure it. 
  • Microservices: How to write policies that limit the risk of data exfiltration, lateral movement and insider attacks or mistakes.
  • CICD: How to impose governance over the policies written by individual teams so that just like application code, bad policies are rejected well before they cause problems.

avatar for Ash Narkar

Ash Narkar

Software Engineer, Open Source, Styra
Ash Narkar is a maintainer of the Open Policy Agent project. Ash has over 5 years of experience working on large-scale distributed systems. Ash is a Senior Software Engineer at Styra, Inc. working on OPA development and integrations. Previously he was a Principal Engineer at Verizon... Read More →

Tuesday September 28, 2021 11:00am - 11:50am PDT
MeetingPlay Platform + Virtual Learning Lab